Secret Scanner

• Analyzed: May 12, 2026, 4:19 AM
• Findings: 1
• Version: 0.1.0
• Hash: 7495bc6c294fdbff19fc07aa3d92440e9cc92bf3c3830c498fc87d2bd764bb58
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkill 'secret-scanner' is a legitimate security tool designed to scan local files and directories for leaked secrets, API keys, and credentials. The `SKILL.md` and `README.md` clearly describe its purpose and capabilities, which are entirely aligned with a benign security audit tool. The `secret_scanner.py` script uses only standard Python libraries, reads local files (as required for its function), and outputs findings to standard output or a user-specified local file. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts against the agent. The code includes features like secret masking and placeholder filtering, indicating a focus on responsible security practices.